Description
The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to cause a denial of service (crash) via malformed queries, probably malformed BER queries, which trigger a free of uninitialized memory locations.
References
- sun-java-cleanupcode-dos(33189) vdb-entry
- ADV-2007-1090 vdb-entry
- 33524 vdb-entry
- 24634 third-party-advisory
- 1017814 vdb-entry
- 20070323 Sun Java System Directory Server 5.2 Uninitialized Pointer Cleanup Design Error Vulnerability third-party-advisory
- 102853 vendor-advisory
- 23117 vdb-entry